Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          4qqolhIp3Uzwem/4YkdGuxsf0xjrAxebTSVtLuFPC6M=
Subject key identifier:   A8:D2:BA:49:E6:B6:B8:85:49:93:3D:09:BE:1B:08:22:A1:59:89:C3
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       02A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          02A8
Signing time:             Fri 17 Apr 2026 04:14:19 +0000
Manifest this update:     Fri 17 Apr 2026 04:14:18 +0000
Manifest next update:     Sun 19 Apr 2026 04:14:18 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: L5cXrXL2ltAf5kc5MoejPS3EpTS6f6uM2oPlu05DNXI=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Apr 17 04:14:18 2026 GMT
            Not After : Apr 19 04:14:18 2026 GMT
        Subject: CN=69e1b39a-de1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:50:30:cc:7d:7d:93:76:e7:dc:d2:45:20:
                    54:78:6e:47:68:e0:09:98:ae:97:1c:4d:ee:b3:71:
                    db:9c:7a:5e:a9:c3:f6:d9:1c:db:6e:b0:77:dc:7a:
                    5f:3f:52:4c:98:1c:52:8e:2a:5c:a6:4f:a5:89:a9:
                    3e:9e:4f:37:5a:72:4e:ae:b3:85:14:cb:1a:b0:b5:
                    6d:8e:0b:50:f9:c2:c1:19:34:30:29:63:69:15:65:
                    91:0d:93:ac:27:8a:94:b5:88:57:5c:45:8d:b7:cd:
                    7f:5f:7c:88:d2:f9:8a:71:56:09:17:fd:cb:be:61:
                    9a:21:56:12:e0:c7:8b:fb:0c:63:e1:80:18:0f:8c:
                    60:b5:9b:f8:16:7f:f7:db:1a:b2:24:37:a6:97:8d:
                    64:e9:09:b3:f2:4e:d5:72:c8:20:d7:28:9a:76:c9:
                    54:bf:f7:f3:aa:87:c8:ec:b6:46:1a:55:f0:a7:56:
                    b0:38:1c:af:f0:42:da:8d:b6:c5:09:ff:ad:d5:8d:
                    5e:7c:08:ee:48:15:0f:f6:87:a5:da:aa:4f:3e:ae:
                    4d:d7:3f:05:45:ec:5b:92:4b:88:4b:27:c0:43:08:
                    fe:02:fb:e4:04:dc:19:87:09:df:b8:8a:4f:86:e3:
                    61:49:94:cf:92:51:79:d7:4b:5d:c1:40:cc:09:ad:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D2:BA:49:E6:B6:B8:85:49:93:3D:09:BE:1B:08:22:A1:59:89:C3
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:39:ec:ba:45:cf:2e:61:58:60:e3:f3:e2:46:8d:33:34:b5:
         c2:b2:56:05:17:be:1b:3b:3b:46:61:88:fc:8a:ad:db:73:76:
         f0:dd:6d:d7:d8:f4:23:39:20:02:33:a5:42:a7:f8:7d:fd:09:
         ee:3c:2f:9e:ec:88:ae:76:a3:6d:99:7b:fc:90:f5:ef:c4:98:
         ea:8a:19:fc:6a:34:1e:40:4c:f4:e7:47:dc:6c:5d:78:f3:91:
         22:7c:96:81:4f:57:eb:e4:e4:1e:b7:3a:b5:a0:93:b3:70:01:
         52:1f:47:41:71:aa:20:a7:c1:7e:0e:10:c7:b8:cd:23:12:d7:
         8e:4a:f9:8d:44:43:2c:12:87:77:20:19:1e:73:9c:6d:ca:5f:
         e4:93:c2:77:0e:89:95:9a:36:72:20:d2:ea:c8:09:08:1c:21:
         83:cd:aa:d5:70:b5:59:d5:40:4c:34:90:09:fe:72:1c:c2:ef:
         0d:7a:5a:7c:5c:44:1b:76:1b:c5:84:46:7f:db:0f:35:cf:f1:
         8b:64:f2:8a:c6:41:72:80:ba:e4:8e:7e:65:b7:e0:79:c1:ce:
         2c:68:bd:f4:cb:4c:6a:2d:ae:bd:eb:70:1e:42:df:79:e5:7e:
         8c:2c:e2:74:66:31:31:a3:4c:92:9b:7a:44:47:59:c0:43:ca:
         4d:98:41:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:59:50 2026 by rpki-client